sequel_vault 0.1 → 0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 9fcd1e2440b221cea5020dd2f48270ad299cc22c
-  data.tar.gz: 23a8b0f2216268942dc6671a9d73a3415bf8359c
+  metadata.gz: 79908bf231a085221e910b96b7345983e900a794
+  data.tar.gz: ce9c51ff401740d8b402dae1edf45c7aa323b991
 SHA512:
-  metadata.gz: c3557360f3bf786d794faaedf627b2c44f1e0a10aa85b879e86d767ed52e0d203a8402193358208dea5ecf6832a9b8a546c4137cd47293f28b510647d505c588
-  data.tar.gz: f4f389d1b62102304ea49ab7ab4b9d38d937997b7f5c6e306c7f62165149e60ba4792bd8dc5095478c9f247154dee53c6494971acc125d53a0ebd88dd2d18c6e
+  metadata.gz: df113a38e57794ac31a830f01ad5b0a65ad9970b5f89c1bda85bc592516849704ad101c75e95b77756fbd07b4c76a48492967636ddf7072a487fbf6c708427ca
+  data.tar.gz: 7953a1f131303b5f2eb28edf48d183c2ee255b76bb7530403e3577c44fc75a85dcee7ad0191c025e58f64e28485741722c5cb69522df15a2efbb57cca4056e69

data/README.md

@@ -0,0 +1,13 @@
+# Sequel-vault
+
+Use [fernet](https://github.com/fernet/fernet-rb) to encrypt columns values in your Sequel database
+
+## Usage
+
+```ruby
+class AWSCreds < Sequel::Model
+  # attrs :access_key_id, ::access_key_id_digest, :secret_access_key, :secret_access_key_digest :region, :name
+  plugin :vault
+  vault_attributes ['Fernet key','...'], :access_key_id, :secret_access_key
+end
+```

data/lib/sequel_vault.rb

@@ -22,8 +22,11 @@ module Sequel
               end
 
               define_method("#{attr}=") do |plain|
-                cypher = encrypt(keys, plain) unless plain.nil?
+                return if plain.nil?
+                cypher = encrypt(keys, plain)
+                digest = OpenSSL::HMAC.digest('sha512', keys.first, plain)
                 super(cypher)
+                send("#{attr}_digest=", digest)
               end
             end
           end

data/sequel_vault.gemspec

@@ -13,7 +13,7 @@ Gem::Specification.new do |gem|
   gem.test_files    = gem.files.grep(%r{^(test|spec|features)/})
   gem.name          = "sequel_vault"
   gem.require_paths = ["lib"]
-  gem.version       = '0.1'
+  gem.version       = '0.2'
 
   gem.add_runtime_dependency 'sequel', '~> 4.21', '>= 4.21.0'
   gem.add_runtime_dependency 'fernet', '~> 2.1', '>= 2.1'

data/spec/sequel_vault_spec.rb

@@ -6,7 +6,7 @@ describe Sequel::Plugins::Vault do
   let(:klass) do
     Class.new(Sequel::Model(db[:vm])) do
       set_primary_key :id
-      set_columns([:id, :secret])
+      set_columns([:id, :secret, :secret_digest])
 
       plugin :vault
     end
@@ -18,6 +18,7 @@ describe Sequel::Plugins::Vault do
   end
   let(:sqls) { db.sqls }
   let(:secret) { "Attack at once." }
+  let(:digest) { OpenSSL::HMAC.digest('sha512', keys.first, secret) }
 
   it "should encrypt vault attributes" do
     model.class.vault_attributes(keys, :secret)
@@ -32,4 +33,11 @@ describe Sequel::Plugins::Vault do
     expect(model.values[:secret]).to be_nil
     expect(model.secret).to be_nil
   end
+
+  it "should write a digest of the value" do
+    model.class.vault_attributes(keys, :secret)
+    model.secret = secret
+    expect(model.values[:secret_digest]).to_not eq(secret)
+    expect(model.secret_digest).to eq(digest)
+  end
 end

metadata

@@ -1,107 +1,107 @@
 --- !ruby/object:Gem::Specification
 name: sequel_vault
 version: !ruby/object:Gem::Version
-  version: '0.1'
+  version: '0.2'
 platform: ruby
 authors:
 - Timothée Peignier
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-04-05 00:00:00.000000000 Z
+date: 2015-06-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sequel
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '4.21'
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: 4.21.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '4.21'
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: 4.21.0
 - !ruby/object:Gem::Dependency
   name: fernet
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '2.1'
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '2.1'
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.1'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '3.2'
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: 3.2.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '3.2'
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: 3.2.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 0.9.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 0.9.2
 - !ruby/object:Gem::Dependency
   name: sqlite3
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.3'
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: 1.3.10
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.3'
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: 1.3.10
 description: Sequel plugins to handle encrypted attributes
@@ -111,11 +111,12 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- .gitignore
-- .rubocop.yml
-- .travis.yml
+- ".gitignore"
+- ".rubocop.yml"
+- ".travis.yml"
 - Gemfile
 - Gemfile.lock
+- README.md
 - lib/sequel_vault.rb
 - sequel_vault.gemspec
 - spec/sequel_vault_spec.rb
@@ -130,17 +131,17 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.0.14
+rubygems_version: 2.4.5
 signing_key: 
 specification_version: 4
 summary: Handle attributes encryption.